Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
File:                     _JEop2LO62tZ9UMVaLwT_OQauhI.mft (raw, json)
Hash identifier:          neYY/rdMXYz9ROtoiuCiW68sC6n5ujWu4PcsRMCivMs=
Subject key identifier:   14:1E:E5:C1:EF:FC:6B:A4:86:86:CE:02:C9:34:CF:38:C8:DF:B0:AB
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Certificate issuer:       /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial:       0196B3A16C080F4B6580F319316AF0D4C10D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
Manifest number:          0393
Signing time:             Fri 09 May 2025 06:00:22 +0000
Manifest this update:     Fri 09 May 2025 06:00:22 +0000
Manifest next update:     Sat 10 May 2025 06:00:22 +0000
Files and hashes:         1: _JEop2LO62tZ9UMVaLwT_OQauhI.crl (hash: 1XDh2vyBTBCjPHKjk31J13P2m8DQYWhanxt6vMKky60=)
                          2: vrcnG3rPeIv-84eM3hfeiXZcqyA.roa (hash: JWLSZU8dWBcg2FNxy+Ts9gij4yT1i3JNXoLy/WJRhwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:b3:a1:6c:08:0f:4b:65:80:f3:19:31:6a:f0:d4:c1:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
        Validity
            Not Before: May  9 06:00:22 2025 GMT
            Not After : May 10 06:00:22 2025 GMT
        Subject: CN=141ee5c1effc6ba48686ce02c934cf38c8dfb0ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:63:49:54:44:72:26:c1:e8:6c:d5:57:a5:ae:
                    31:d0:f5:52:b9:2c:58:04:eb:05:c1:d3:47:ec:16:
                    6f:f2:cb:f0:61:58:6c:88:39:98:24:9c:69:e8:62:
                    d4:92:c0:e4:98:c3:0c:f0:b4:7a:ed:01:3f:8b:9c:
                    52:36:ae:2d:66:f6:e2:e6:f6:30:e5:03:0c:98:ff:
                    53:f3:ba:8d:2d:35:75:0f:f2:f5:9e:dd:a2:99:5a:
                    f5:da:c0:40:09:f1:35:de:a2:46:f9:5c:40:25:c7:
                    6b:b5:8c:66:8b:b3:89:dc:47:96:7c:50:3b:08:d6:
                    41:1f:ca:a3:c0:e8:10:d9:ab:2a:63:e0:fa:b9:d6:
                    8d:e8:84:2a:cb:39:2e:7a:a3:60:a3:89:c6:8c:ce:
                    90:79:1b:9f:ff:eb:60:3d:d3:f9:01:1d:29:a4:10:
                    5c:53:37:e2:34:89:96:b5:a2:8a:37:a3:4a:8e:65:
                    88:01:22:74:22:f7:26:34:44:d4:e8:d6:5d:dc:11:
                    ba:32:a1:94:f0:0f:6d:8a:ae:ac:66:de:1e:9f:27:
                    27:f4:0e:3f:1c:ab:2c:8c:ad:9f:ce:b6:03:0d:b0:
                    d8:79:af:59:1c:14:47:eb:bf:78:5e:0e:2e:d7:50:
                    60:9a:65:99:8b:d3:22:e0:42:d4:37:c6:53:d6:08:
                    16:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1E:E5:C1:EF:FC:6B:A4:86:86:CE:02:C9:34:CF:38:C8:DF:B0:AB
            X509v3 Authority Key Identifier:
                keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:0a:8c:8a:77:68:fe:62:b4:08:b6:15:9c:da:89:c9:dc:f7:
         34:92:45:92:02:e7:cc:b7:b1:68:d1:07:bd:77:ea:7a:85:3c:
         ab:55:61:1e:f4:50:df:05:79:bc:f7:92:14:ef:c8:19:e5:f1:
         f5:d3:21:0d:82:28:43:98:41:25:18:a5:88:53:43:bc:25:00:
         05:35:f1:b1:45:16:ba:92:75:43:c7:19:1a:b0:0d:c3:d9:31:
         9f:90:a1:46:e5:51:14:9d:f0:b1:29:a9:91:11:d5:ce:16:b2:
         9d:dd:30:69:ac:cd:4a:f8:11:7e:d6:2d:9f:8a:d5:64:e8:b6:
         aa:88:b5:c5:9b:00:ce:1b:05:34:25:52:b6:91:bc:a1:bd:47:
         0e:0e:f3:0f:03:63:66:88:ad:a5:7e:e5:7b:60:ad:23:ea:37:
         0c:23:b6:4e:01:4d:3e:a4:33:ad:1f:2c:ae:b6:f6:cb:43:a3:
         91:36:a6:0a:d6:1a:3c:d6:28:32:f3:0a:fb:7b:fc:31:23:28:
         51:f6:07:2c:3e:74:03:f3:82:b8:c7:51:ca:59:68:12:75:c3:
         9f:f3:fb:eb:17:af:4a:8d:62:b8:ea:dc:86:45:ae:a8:cc:f3:
         80:72:c9:b9:db:6d:c7:a8:c5:49:02:24:3a:6d:e3:15:41:bb:
         15:b3:81:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:27:27 2025 by rpki-client